In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HSophos Web Appliance
APPSophos≤ 4.3.1.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2023-1671CRITICAL9.8⚠ KEVten sam produkt
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than vers...
CVE-2017-6182CRITICAL9.8ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating ...
CVE-2022-4934HIGH7.2ten sam produkt
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version...
CVE-2017-6412HIGH8.1ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
CVE-2016-9554HIGH7.2ten sam produkt
The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Comman...